81 matches found
New iPhone Bug Gives Anyone Access to Your Private Photos
A security enthusiast who discovered a passcode bypass vulnerability in Apple's iOS 12 late last month has now dropped another passcode bypass bug that works on the latest iOS 12.0.1 that was released last week. Jose Rodriguez, a Spanish amateur security researcher, discovered a bug in iOS 12 in...
Apple iOS VoiceOver Information Disclosure Vulnerability
Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which VoiceOver is a voice-assisted component. An information disclosure vulnerability exists in the VoiceOver component in Apple iOS versions prior to 12.0.1. A local attacker can exploit the vulnerability to view...
About the security content of iOS 12.0.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
About the security content of iOS 12.0.1
About the security content of iOS 12.0.1 This document describes the security content of iOS 12.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
iOS 10 Passcode Bypass Can Access Photos, Contacts
A vulnerability in Apple’s iOS versions 8, 9, and 10 could allow an attacker to access photos and contacts on a locked iPhone, according to two sources that posted videos showing how the password bypass works. According to both sources, the vulnerability also impacts the most recent version of iO...
Apple Mac OS X 本地安全绕过漏洞
BUGTRAQ ID: 58512 CVECAN ID: CVE-2013-0969 Apple Mac OS X是苹果电脑操作系统软件。 Apple Mac OS X 10.8.3之前版本的登录窗口没有阻止应用用VoiceOver功能启动，允许物理位置接近的攻击者绕过身份验证并通过键盘更改系统首选项。 0 Apple Mac OS X 10.7.4 Apple Mac OS X 10.7.3 Apple Mac OS X 10.7.2 Apple Mac OS X 10.7.1 Apple Mac OS X Server 10.7.4 Apple Mac OS X Server...
Mac OS X 10.8 < 10.8.3 Multiple Vulnerabilities (Security Update 2013-001)
Binary data 6717.prm...
Authentication flaw
Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes via unspecified use of the keyboard...
CVE-2013-0969
Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes via unspecified use of the keyboard...
CVE-2013-0969: Undefined Security Weakness
Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes via unspecified use of the keyboard...
PT-2013-2762
Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.3 Description The issue allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes. This is possible due to the Login Window not preventing application...
CVE-2010-1809
The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...
Information disclosure
The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...
CVE-2010-1809
The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...
CVE-2010-1809
The CVE-2010-1809 entry concerns Apple iOS prior to 4.1, specifically the Accessibility VoiceOver feature failing to announce the location services icon on iPhone/iPod touch. The underlying issue is tied to the Accessibility component and VoiceOver handling, with impact and attack vectors not exp...
PT-2010-3442 · Apple · Ios
Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 Description: The issue concerns the Accessibility component, specifically the VoiceOver feature, which does not announce the location services icon as expected. The impact and attack vectors of this issue are n...
CVE-2010-1809: Undefined Security Weakness
The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...
CVE-2005-2513
The CVE-2005-2513 entry concerns HItoolbox for Mac OS X 10.4.2 where VoiceOver can read secure input fields, implying a UI/input security bypass. The exact root cause and vulnerable components are not fully detailed in the provided documents, but the NVD entry assigns a Medium severity (CVSSv2 ba...